Timeline for Certificate Authority RSA key expiration?
Current License: CC BY-SA 3.0
11 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 24, 2016 at 19:16 | comment | added | Maarten Bodewes♦ | You can believe whatever you want, but "servers send their certificates to browsers and browsers attempt to decrypt them" is absolute nonsense. Certificates are certainly not encrypted, I can view their contents without issue even if I do not possess the public key of the CA. Note that you cannot directly encrypt with an ECDSA private key and that the same modular exponentiation operation in PKCS#1 has been explicitly named differently for signing and authentication. | |
| Dec 24, 2016 at 19:05 | history | tweeted | twitter.com/StackCrypto/status/812735871992664064 | ||
| Dec 24, 2016 at 18:51 | vote | accept | madz | ||
| Dec 24, 2016 at 18:46 | comment | added | madz | @MaartenBodewes I studied the link your mentioned and actually I did not know about different padding schema for signing and encrypting. So +1 for you there. But broadly speaking, I still believe that signing is encrypting with private key and to verify signature, the public key of CA should be involved | |
| Dec 24, 2016 at 12:26 | answer | added | SEJPM | timeline score: 5 | |
| Dec 24, 2016 at 0:49 | comment | added | Maarten Bodewes♦ | Note: certificates are not decrypted in any way, they are verified. Decryption with a public key - if such a thing exists - is not the same as signature verification. More information here | |
| Dec 24, 2016 at 0:47 | answer | added | Maarten Bodewes♦ | timeline score: 3 | |
| Dec 24, 2016 at 0:06 | comment | added | madz | Hey, SEJPM. I'm a little bit sleepover tonight. Anyway the way you explain details worth to wait another 24 hours ;) | |
| Dec 23, 2016 at 23:45 | comment | added | SEJPM | TL;DR: Yes they do, however this happens much less often than the end user has to do it. More details to follow tomorrow (time to sleep for me here). | |
| Dec 23, 2016 at 23:24 | history | edited | e-sushi | CC BY-SA 3.0 |
deleted 21 characters in body; edited title
|
| Dec 23, 2016 at 22:45 | history | asked | madz | CC BY-SA 3.0 |